Re: (PM) Radius (fwd)

Chris Wilson (cbw@atlantic.net)
Thu, 6 Nov 1997 23:17:15 -0500 (EST)

On Thu, 6 Nov 1997, Jacob Suter wrote:

> Why not a 'is this luser already logged in' system? Lets say you have
> pm1-pm8... luser logs into pm8, it checks the 'users' file, sees that
> he has a max-ports of 1... at that point calling all the portmasters and
> going "is this luser already logged in?"... A finger-like software with
> real security would work.
>
> *sigh* it seems like such an easy thing to fix, and its not.

Exactly, not that easy of a thing to fix. Yeah, you could write a hack to
handle it on a small scale, but what about if you've got hundreds of PM's,
most of the simple solutions simply won't scale. If you've got multiple
RADIUS servers geographically dispersed, you can't just keep a users
"table" of who is logged in, since they could login off any server. You
could do a SNMP check, but what happens if you've got some backbone
congestion and authentication takes years.

That's the joy of RADIUS though, it's an open standard, you've got the
source. If there's something you simply MUST have it do, write it
yourself.

Chris

Chris Wilson (CW40) | http://www.atlantic.net
Internet Connect Company | Dial-up access * Web hosting
Sales: 800-422-2936 Support: 800-921-9328 | Leased lines * News services

-
To unsubscribe, email 'majordomo@livingston.com' with
'unsubscribe portmaster-users' in the body of the message.